aws-cli-mcp-server 1.0.1

A simple implementation of an AWS CLI MCP server with read/write tools for executing AWS CLI commands

AWS CLI MCP Server

A simple implementation of an AWS CLI MCP server.

Overview

This MCP server provides a bridge to execute AWS CLI commands through two main tools:

• aws_cli_read: For read-only AWS operations (listing resources, describing configurations, etc.)
• aws_cli_write: For write operations (creating/modifying/deleting AWS resources, pricing queries)

Features

• Execute AWS CLI commands safely through MCP tools
• Separate read and write permissions for better security control
• Built-in timeout protection (5 minutes)
• Error handling and output capture
• Support for complex bash scripts and command consolidation
• Automatic AWS profile management via environment variable

Usage

The server exposes two tools that can execute AWS CLI commands:

1. Read Operations: Use aws_cli_read for queries and listing operations
2. Write Operations: Use aws_cli_write for modifications and resource management

Both tools require:

• script: The AWS CLI command or bash script to execute
• reasoning: Explanation for why the operation is needed

Setup

AWS SSO Configuration

To use this server with AWS IAM Identity Center (SSO), you'll need to configure your AWS CLI with SSO authentication first follow this guide.

Run Server

Locally:

# Using uvx (recommended)
uvx --env AWS_PROFILE=your-sso-profile aws-cli-mcp-server

Using JSON configuration file with profile:

{
  "mcpServers": {
    "aws-cli-mcp-server": {
      "command": "uvx",
      "args": [
        "aws-cli-mcp-server"
      ],
      "env": {
        "AWS_PROFILE": your-sso-profile
      }
    }
  }
}

or with secret key:

{
  "mcpServers": {
    "aws-cli-mcp-server": {
      "command": "uvx", 
      "args": [
        "aws-cli-mcp-server"
      ],
      "env": {
        "AWS_ACCESS_KEY_ID": "your-access-key",
        "AWS_SECRET_ACCESS_KEY": "your-secret-key",
      }
    }
  }
}